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Amendments to the Claims; 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of the Claims 

1 (Currently Amended) A method for evidencing payment of indicia using secret key 
cryptography in a system including a plurality of indicia generating devices that are divided 
into group s, each group corresponding to a respective geographic designation, each of the 
indicia generating devices for generating and printing indicia on a media that is to be 
received at a plurality of establishments, wherein the establishments axe associated with 
different geographic designations, the method comprising th e steps of : 

(a) assigning a set of verification keys from among a p lurality of verification 

" keys to each Indicia generating device in each of the groups, wherein each of 
thesetof verification keys assigned to e ach of the groups is encrypted as a 
function of a-respective geographic designatio ns, and distributing the 
assigned set of verification keys to the devices in the corresponding indicia 
generating device group via a network: 

(b) associating a key ID with each of the verification keys and encrypting each 
key ID as a function of the same geographic designation used to encrypt the 
corresponding verification ke y, and distributing the key IDs to the devices in 
the corresponding indicia generating device group via the network ; 

(c) distributing to each one of the establishment s in the respective geograp hic 
designations via the network, the set of verification keys and associated t he 

PAGE 4/24 * RCVD AT 9/15/2004 12:17:52 PWI [Eastern Daylight Time] * SVR:USPTO-EFXRF-2/3 * DNiS:7469795 * CSID:650 493 4549 * DURATION (mm-ss):06-10 



SEP- 1 5-04 07:50 F ROM-SAWYER LAW GROUP LLP 



650-493-4549 



T-995 P. 005/024 F-S99 



Attorney Docket 1755P 
key ID's that were encrypted as a fraction of the geographic designation 

associated with the establishment; 

(d) using one of the indicia generating devices to generate indicia for media 
destined for a particular one of the establishments, and evidencing the indicia 
by 

(i) generating one of the verification keys and the corresponding key ID 
assigned to indicia generating device's group based on the 
geographic designation associated with the particular establishment, 
and 

(ii) using the generated verification key to create a digital signature, and 
digitally signing the indicia by including the digital signature and the 
generated key ID in the indicia; and 

(e) ( upon receiving the media at the particular establishment, verifying the indicia 

on the media using the key ID on the indicia and the distributed verifications 
keys to compute a digital signature, and comparing the computed digital 
signature with the digital signature on the indicia. 



2 (Original) The method of claim 1 further including the steps of: 

assigning a secret key to each of the groups, and 

encrypting the verification keys assigned to each group as a function of the secret 
key and the different geographic designations. 

3 (Original) The method of claim 2 further including the steps of: 
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generating a master key; and 

encrypting the key ID as a function of the master key, the geographic designation, 
and a designation of the group, 

4 (Original) The method of claim 3 further including the step of generating and printing 
indicia for postage on a mail piece that is to be received at a plurality of distribution centers. 

5 (Original) The method of claim 4 further including the step of verifying the indicia at a 
destination distribution center, 

6 (Original) The method of claim 4 further including the step of verifying the indicia at an 
originating distribution center, 

7 (Original) The method of claim 3 further including the step of using zip codes to 
represent the geographic designations. 

8 (Original) The method of claim 1 further including the step of generating and printing 
indicia for tickets. 

9 (Currently Amended) A method for evidencing payment of postage using secret key 
cryptography in a system including a plurality of postage generating devices that are divided 
into groups , each group corresponding to a respective postal destination, each of the postage 
generating devices for generating postage indicia for mail destined for predetermined postal 
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destinations, the method comprisin g th e stops of : 

(a) assigning a set of verification keys from among a p lurality of verification 
keys to each indicia generating device in each of the groups, wherein each ef 
& eset of verification keys assigned to each of the groups is encrypted as a 
function of a respective postal destination, and distributing the assigned set of 
verification keys to the devices in the corresponding indicia generating 
device group via a network : 

(b) associating a key ID with each of the verification keys and encrypting each 
key ID as a function of the same destination used to encrypt the 
corresponding verification ke y, and distributing the key IDs to the devices in 
the corresponding indicia generating device group via the network : 

(c) requiring that verifiers of the postage indicia perform postal verification at 
1 the plurality of destinations, where each verifier services a respective 

destination; 

(d) distributing to each respective destination verifie r via the network, the 
verification keys and the keylD's that were encrypted as a function of the 
corresponding destination; and 

(e) requiring each of the postage generating devices to evidence the postage 
indicia for a mail piece destined for a particular destination by 

(i) generating one of the verification keys and the corresponding key ID 
assigned to its group based on that particular destination, and 

(ii) using the generated verification key to create a digital signature, and 
digitally signing the indicia by including the digital signature and the 
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; generated key ID on the indicia, such that when the mail is received at 

; the predetermined destination, the verifier uses the key ID on the 
indicia and the distributed verifications keys to compute a digital 

i signature, and compares the computed digital signature with the 
digital signature on the postage indicia to verify the postage indicia, 

i 
i 

10 (Original) The method of claim 9 further including the steps of: 

assigning a secret key to each of the groups, and 

encrypting the verification keys assigned to each group as a function of the secret 
key and the plurality of destinations. 

1 1 (Original) The method of claim 1 0 further including the steps of: 

generating a master key; and 

i 

encrypting the key ID as a function of the master key, the destination, and a 

designation of the group, 

i 

12 (Original) The method of claim 11 further including the step of performing postage 
verification onsite at a destination distribution center. 

13 (Original) iThe method of claim 12 further including the step of performing postage, 
verification by a third party that is in remote communication with the destination distribution 
center. 
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14 (Original) The method as in claim 13 wherein the verifier further performs the steps of 
using the key ID to retrieve the corresponding verification key used to originally create the 
digital signature. 

15 (Currently Amended) A system for evidencing payment of postage using secret key 
cryptography, comprising: 

a plurality of postage generating devices that are divided into groups , each group 
corresponding to a respective postage destinations, each of the postage 
generating devices for generating postage indicia for mail destined for 
predetermined postal destinations; 
a plurality of distribution centers for verifying the postage indicia, where each 

distribution center services at least one of the postage destinations; and 
a key distribution center in communication with the plurality of postage generating 
devices and with the plurality of distribution centers, the key distribution 
center for performing the functions of: 

assigning a set of verification keys from among a p lurality of 
verification keys to each indicia generating device in each of 
the groups, wherein each of thc sgt of verification keys 
assigned to e ach of t he groups is encrypted as a function of a 
respective destinations, and for associating a key ID with each 
of the verification keys and encrypting each key ID as a 
Junction of the same destination used to encrypt the 
corresponding verification key, and 
distributing via a network to each of the plurality of distribution 
centers and the postage generating devices in each group of 
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postage generating devices, the set of v erification keys and the 
key ID'S encrypted as a function of the corresponding 
destinatio n the distribution center s e rvices , 
wherein in response to a request to generate indicia for a mail piece destined for a 
particular destination, each of the postage generating devices generates u ses 
one of the verification keys and the corresponding key ID assigned to its 
group bused on that particular d e stination, and uses the g e n e rat e d verification 
^ key-to create a digital signature for the indici a, such that when the mail is 

^ oeei - ved - at - the - diatributiQn orator GOEv - fcsing th e - pr e d e t e rmin e d d e stination; th e 
k e y ID from th o indicia and the verification k e ys distributed to th e 
distribution oont eg-afe^ God to v e rify th o digital signatur e on the postag e 
iadieia 

16 (Original) The system of claim 15 wherein the key distribution center further generates a 
master key, and a secret key for each of the postage generating devices groups, and 
distributes the master key and the secret key to the respective postage generating devices 
within each of the groups. 

17 (Original) The system of claim 16 wherein the verification keys assigned to each group 
are encrypted as a function of the secret key and the plurality of destinations. 

18 (Original) The system of claim 17 further wherein the key ID is encrypted as a function 
of the master key, the destination, and a designation of the group, 
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19 (Original) The system of claim 18 wherein verification of the postage is performed 
onsite at the destination distribution centers, 

20 (Original) The system of claim 19 wherein verification of the postage is performed by a 
third party that is in remote communication with the destination distribution centers. 

21 (Original) The system as in claim 20 wherein the indicia is verified by using the key ID 
from the indicia to retrieve the corresponding verification key used to originally create the 
digital signature, wherein the retrieved verification key is used to compute the digital 
signature for the indicia and the computed digital signature is compared with the digital 
signature from the indicia, 

22 (Currently Amended) A c omputer-readable m edia c ontainrng p rogram i nstructions for 
evidencing payment of postage using secret key cryptography in a system including a 
plurality of postage generating devices that are divided into groups, each group 
coirespond m p to a respective geographic designation, each of the postage generating 
devices for generating postage indicia for mail destined for predetermined postal 
destinations from among a plurality of destinations, the program instructions for: 

(a) assigning a set of verification keys from among a p lurality of verification 
keys to each indicia generating device in each of the groups, wherein each set 
of ef - tho v erification k eys a ssigned t o eafifc-e£-the g roups i s e ncrypted a s a 
function of ar-respective liqgtal destinatio ns, and distributing the assigned set 
of verification keys to the devices in the corresponding indicia generating 
device group via a network ; 
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(b) associating a key ID with each of the verification keys and encrypting each 
key ID as a function of the same destination used to encrypt the 
corresponding verification ke y, and distributing the key IDs to the devices in 
the corresponding indicia generating device group via the network : 

(c) requiring that verifiers of the postage indicia perform postal verification at 
the plurality of destinations, where each verifier services a respective 
destination; 

(d) distributing to each respective destination verifie r via the network, the 
verification keys and the keylD's that were encrypted as a function of the 
corresponding destination; and 

(e) requiring each of the postage generating devices to evidence the postage 
indicia for a mail piece destined for a particular destination b vusing one of 

*■ the verification keys and the corresponding key ID assigned to its group one 
of the verification keys and the corresponding key ID assigned to its group 

(i) gen e rating on e of the verification k e ys and the corr e sponding key ID 

assign e d to its group bas e d on that particular d e stination, and 

(ii) using th e gen e rat e d v e rification key to cr e at e a digital signature, and : 
digitally - signing the indicia by- including ^ thc ^igit al — si^QtLffc - ^ad - tho 
g e nerated k e y ID on the indicia, such that - when - the maik is - rocQivod at-the 
predeteHBme d - d eS ^mationvth e v e rifi e r us e s the k e y ID on th e indicia and th e 
distribut e d v e rifications keys to comput e a digital signature, and compares 
tho compHted - digital - signature with the digital signature on th e postag e 
indicia to v e rify th e postage indicia . 
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23 (Original) The computer-readable media of claim 22 further including the instructions 
of: 

assigning a secret key to each of the groups, and 

encrypting the verification keys assigned to each group as a function of the secret 
key and the plurality of destinations. 

24 (Original) The computer-readable media of claim 23 further including the instructions 
of: 

generating a master key; and 

encrypting the key ID as a function of the master key, the destination, and a 
designation of the group. 

25 (Original) The computer-readable media of claim 24 further including the instruction of 
performing postage verification onsite at a destination distribution center. 

26 (Original) The computer-readable media of claim 25 farther including the instruction of 
performing postage verification by a third party that is in remote communication with the 
destination distribution center. 

27 (Original) The computer-readable media as in claim 26 further including the instructions 
of using the key ID to retrieve the corresponding verification key used to originally create 
the digital signature. 

28 (Currently Amended) A method for generating and distributing cryptographic keys for 
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postage evidencing and verification in a system where mail is destined for predetermined 
postal destinations , wherein each of the postal destinations is serviced by a postal 
distribution center, the method comprising^fcfl-step&^f : 

(a) "creating a master secret key K; 

(b) dividing a plurality of postage generating devices (PGDs) that generate 
postage indicia for mail into n groups Gi 9 i 1, - • -n; 

(c) assigning each PDG group, G/, a secret key K,; 

(d) generating a set of n verification keys, V?* ,i = l r », n , for each PGD group 
Gty where each of the verification keys is calculated as a function of a 
respective postal destination (Dest); 

(e) generating a set of key ID's, If°\i = l,...,n , where each key ID corresponds 
to one of the verification keys and is also generated as a function the same 
postal destination used to calculate the corresponding verification key; 

(f) transferring t o e ach d istribution c ente r via a network , the v erification k eys 
Vi DaSt and key 10*5 if 3 ** that were calculated as a function of the destination 
serviced by the distribution center; and 

(g) transferring the master secret key K and the secret key K { to all PGD's in 
group d via the network, such that each PGD, when evidencing indicia for 
the mail destined for one of the predetermined postal destination, generates 
one of the verification keys based on the predetermined postal destination to 
create a digital signature for the indicia. 

29 (Original) The method of claim 28 further including the step of computing each 
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verification key Vi Pest as a one-way function H of the PGD group key AT,- and a designation 
of the postal destination: 



30 (Original) The method of claim 29 further including the step of using ZIP codes to 
designate the plurality of postal destinations, 

31 (Original) The method of claim 30 further including the step of computing each of the 
key ID's as a one-way function H of the PGD group, G,, the master secret key, K 9 and a 
designation of the postal destination, Dest: 



32 (Original) A method for verifying postage indicia a mail piece received at a postal 
distribution center that services a particular postal region, comprising the steps of: 



Ii Dest identifying the verification keys, wherein the verification keys and the 
key ID's were generated as a function of the postal region; 

(b) in response to receiving the mail piece, determining the mail piece's postal 
region; 

(c) if the distribution center is not within the mail piece's destination region, 
transferring the mail piece to the distribution center within the mail piece's 
postal region; and 




receiving and storing a set of verification keys Vt 



and a set of key ID'S 
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(d) if the distribution center is within the mail piece's postal region, verifying the 
postage indicia by 

(i) reading a digital signature and a key ID from the indicia, 

(ii) using the key ID read from the indicia to retrieve the corresponding 
verification key from the stored set of verification key$, 

(iii) using the retrieved verification key to compute a digital signature for 
the indicia, and 

(iv) comparing the computed digital signature with the digital signature 
read from the postage indicia to verify the indicia. 

33 (Original) The method of claim 32 further including the step of determining the mail 
piece's postal region based on a zip code* 
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34 (Original) The method of claim 33 further including the step of determining the mail 
piece's postal region based on a destination zip code. 

35 (Original) The method of claim 33 father including the step of determining the mail 
piece's postal region based on a return address zip code. 

36 (New) The system of claim 15 wherein in response to a request to generate indicia, 
each of the postage generating devices generates one of the verification keys and the 
corresponding key ID assigned to its group based on that particular destination, and uses 
the generated verification key to create a digital signature for the indicia, such that when 
the mail is received at the distribution center servicing the predetermined destination, the 
key ID from the indicia and the verification keys distributed to the distribution center are 
used to verify the digital signature on the postage indicia. 

37 (New) the compute-readable media of claim 22 wherein instruction (e) further 
includes the instructions of 

(i) generating one of the verification keys and the corresponding key 
ID assigned to its group based on that particular destination, and 

(ii) using t he generated v erification k ey t o c reate a digital s ignature, 
and digitally signing the indicia by including the digital signature 
and the generated key ID on the indicia, such that when the mail is 
received at the predetermined destination, the verifier uses the key 
ID on the indicia and the distributed verifications keys to compute 
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a digital signature, and compares the computed digital signature 
with the digital signature on the postage indicia to verify the 
postage indicia 
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